Official Duva client library (transactional email API hosted in Canada).
65%
Total Score
caution
Only eight days old, with one contributor and two releases, but backed by an active organization and solid package hygiene.
The package is only 8 days old with 2 releases, so there is not enough history to demonstrate sustained maintenance or release stability.
All 3 recent commits came from one contributor, creating a narrow individual maintenance path; the organization-owned project provides some ability to hand work off.
The repository recorded 3 commits in the last 3 months, showing some activity, but the volume is still too small to establish durable maintenance.
The repository has 0 stars, forks, and watchers; for an 8-day-old package this is weak supporting evidence but not a health verdict by itself.
Composer is used for builds, but no security scanning tool was detected, leaving a modest gap in repository security hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.